TDE Enable???

Question

TDE Enable???

LearningDBA

SSCertifiable

Points: 6609
More actions
January 16, 2014 at 7:29 am

#302854

What happens if I go to SERVER properties -->option-->and enable encryption?
"He who learns for the sake of haughtiness, dies ignorant. He who learns only to talk, rather than to act, dies a hyprocite. He who learns for the mere sake of debating, dies irreligious. He who learns only to accumulate wealth, dies an atheist. And he who learns for the sake of action, dies a mystic."[/i]

Viewing 15 posts - 1 through 15 (of 34 total)

You must be logged in to reply to this topic. Login to reply

Gail Shaw SSC Guru Points: 1004504 More actions · Answer 1

You mean 'database properties'? (there is no options tab, nor any encryption option on the server setting)

Enabling TDE encrypts the database and backups so they cannot be restored or attached on another instance unless the relevant encryption keys have been backed up and restored on the new instance.

Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

LearningDBA SSCertifiable Points: 6609 More actions · Answer 2

I also read that it can encrypt tempdb and transactional log as well. What happens if those 2 are encrypted?

"He who learns for the sake of haughtiness, dies ignorant. He who learns only to talk, rather than to act, dies a hyprocite. He who learns for the mere sake of debating, dies irreligious. He who learns only to accumulate wealth, dies an atheist. And he who learns for the sake of action, dies a mystic."[/i]

Gail Shaw SSC Guru Points: 1004504 More actions · Answer 3

Yes, it encrypts TempDB as well. The log is part of the database so 'encrypts the database' means encrypts the data files and log file.

Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

LearningDBA SSCertifiable Points: 6609 More actions · Answer 4

How much does it affect the performance?

"He who learns for the sake of haughtiness, dies ignorant. He who learns only to talk, rather than to act, dies a hyprocite. He who learns for the mere sake of debating, dies irreligious. He who learns only to accumulate wealth, dies an atheist. And he who learns for the sake of action, dies a mystic."[/i]

Gail Shaw SSC Guru Points: 1004504 More actions · Answer 5

Shouldn't be noticeable.

Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

Perry Whittle SSC Guru Points: 234013 More actions · Answer 6

There is a list of pre requesites that need to be met before you can enable TDE, have you performed these?

-----------------------------------------------------------------------------------------------------------

"Ya can't make an omelette without breaking just a few eggs" 😉

Gail Shaw SSC Guru Points: 1004504 More actions · Answer 7

Perry Whittle (1/16/2014)
There is a list of pre requesites that need to be met before you can enable TDE, have you performed these?

Prerequisites including reading up on how you restore an encrypted backup to another server and how to backup the encryption keys.

Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

Perry Whittle SSC Guru Points: 234013 More actions · Answer 8

GilaMonster (1/16/2014)
Perry Whittle (1/16/2014)
There is a list of pre requesites that need to be met before you can enable TDE, have you performed these?
Prerequisites including reading up on how you restore an encrypted backup to another server and how to backup the encryption keys.

Yup, but i was thinking more of the initial implementation let alone backing up dna restoring to another server, that's the easy part lol

-----------------------------------------------------------------------------------------------------------

"Ya can't make an omelette without breaking just a few eggs" 😉

LearningDBA SSCertifiable Points: 6609 More actions · Answer 9

I am just going by this document that I found on google.

http://technet.microsoft.com/en-us/library/cc278098(v=sql.100).aspx

"He who learns for the sake of haughtiness, dies ignorant. He who learns only to talk, rather than to act, dies a hyprocite. He who learns for the mere sake of debating, dies irreligious. He who learns only to accumulate wealth, dies an atheist. And he who learns for the sake of action, dies a mystic."[/i]

Perry Whittle SSC Guru Points: 234013 More actions · Answer 10

that covers a wide range of encryption options, is TDE the option you are seeking to implement?

-----------------------------------------------------------------------------------------------------------

"Ya can't make an omelette without breaking just a few eggs" 😉

LearningDBA SSCertifiable Points: 6609 More actions · Answer 11

Yes. TDE is the option we are considering.

"He who learns for the sake of haughtiness, dies ignorant. He who learns only to talk, rather than to act, dies a hyprocite. He who learns for the mere sake of debating, dies irreligious. He who learns only to accumulate wealth, dies an atheist. And he who learns for the sake of action, dies a mystic."[/i]

Gail Shaw SSC Guru Points: 1004504 More actions · Answer 12

To solve what problem?

Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

Michael Valentine Jones SSC Guru Points: 64818 More actions · Answer 13

TDE cannot be used with compressed backups, so you may need more space for database backups and they may take longer to run.

LearningDBA SSCertifiable Points: 6609 More actions · Answer 14

Well maybe to protect the data. We have the database up and are using it as our Customer's Development environment. We need to get the database encrypted per the customer's requirements. However, my lead and my manager know all the details. I was just told to do some homework and that's what I am doing.

"He who learns for the sake of haughtiness, dies ignorant. He who learns only to talk, rather than to act, dies a hyprocite. He who learns for the mere sake of debating, dies irreligious. He who learns only to accumulate wealth, dies an atheist. And he who learns for the sake of action, dies a mystic."[/i]